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Claim 29, 33 as being anticipated by Shrader 

A. method for verifying a cast ballot B„« stored in a server, the method comprising: 

Shrader does not disclose a method for verifying a cast ballot in a server. "Verification," 
as an activity in the application, is initiated by a user after obtaining a confirmation token from a 
system of the invention: 

[0004] ... "verifiability" (everyone should be able to verify their awn ballot ... 

[0060] Descriptors 71 and 73 illustrate what is known as individual verifiability 1 ... 

[0019] ... the terms "individual", "user", "client", and "voter " are used 
interchangeably, and refer to a person ... 

Shrader discloses verification by a combination of a "tabulator" and a "mediator," two s ervers in 
a Shrader system. See e.g., Schrader [0063]. 

Most of the portions of the Shrader cited in the 07/1 1/06 OA (Abstract; [0O50]-[0053]; [0060]- 
[0062]; Figures 4-8) do not mention verification even in the above inapplicable manner. 

forming a digital signature of B™*, using a private key of the sxrver DSfJB™*, si: 

Shrader does not disclose a server signing a cast ballot B^f In the application, B cas , 
represents the actual votes. 

[0052] ... The cast ballot Beast 51 is structured in a way that it is easy to read xhe 
response values and determine which issues or offices were being voted on, and what the 
selections were. 

In Shrader, the tabulator signs the empty ballot as part of validation. 


1 "Individual" veriilabitity is what is claimed in Claims 29 and 33. The other sort of verifiability is "universal" and 
does not require a confirmation token. 
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[0062] ~. Voting entity casts its votes 66 and encrypts the 
votes and the encrypted electronic ballot 

This clearly shows that the votes and the ballot are two separate things. Later Slirader 
uses the private key of the tabulator to encrypt the empty ballot, not the votes: 

[0063] ... The voting tabulator signs, encrypts and sends the 
encrypted ballot to the voting mediator in a message that 
is encrypted with the voting mediator's public key and 
signed with the voting tabulator's private key. 

The 07/] 1/2006 OA also cites Figures 7-8 element 72 as applicable. Those drav/ings 
provide no applicable disclosure. 

That Shrader's ballot does not contain votes (as the present application's Beast does) is 
even more apparent a few sentences later when Shrader teaches away from, the next limitation. 

associating B raxt and DS(B r ^, s) with a vote serial number (VSN); 

Shrader does not disclose associating B caat and DS(B C8St} s) with a vote serial number 
(VSN). hi fact, Shrader teaches away from this approach: 

[00S3] ... The verification message does not contain th< * 
actual votes from the ballot, since the voting must bt s 
anonymous . 

forming a confirmation token, comprising DBCBcast, s) and VSN: 

The 07/1 1/2006 OA cites [0061]-[0063] and Figures 7-8 as disclosing this limitation. As 
noted above, in [0063] Shrader teaches away from relating the cast ballot (actual votes) with an 
identifier like a Vote Serial Number. 
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making the confirmation token available to a user; receiving a. confirmation token 
made available to a user; 

The 07/] 1/2006 OA asserts that Shrader's disclosure of a verification message between 
two servers (the tabulator and the mediator) in [0063] constitutes roakirsg the corifirmation token 
available to a user. In addition to the fact that Shrader does not form a ronfirmation token as that 
term is defined in the Claims, it has been shown that a server is not a "user" 

[0019J ... the terms "individual", "user", "client", and "voter ' 1 are used 
interchangeably, and refer to a person ... 

The confirmation token that Shrader doesn't disclose isn't made available to a uwer; so 
it's difficult to see how the nonexistent unavailable token can then be r<:>ceived by the server. 
Each of these steps is required by the claims. 

extracting VSN rPr „h^ t^., and jPSV^w ^JB^,, s) from the received token; 

With no token having been created containing elements that Shrader teaches away from 
combining, and with the non-created token not having been available to a user who didn't return 
it, it's not possible for a Vote Serial Number and Cast Ballot (signed wiith the private key of the 
server) to be exlracted from such a token. 


PAGE 414 * RCVD AT 10/512006 1 1 :31:46 AM [Eastern Daylight Time] 1 SVR:USPTO-EFXRF-2/9 1 DMS:273S300 * CSID:2025085S58 * DURATION (mm-ss):01-34 


